Appln. No. 10/730,400 

Amendment dated May 5, 2008 

Reply to Office Action of February 4, 2008 

Docket No. BOC9-2003-0073 (444) 

Amendments to the Claims: 

This listing of claims will replace all prior versions and listings of claims in the instant 
application: 

Listing of Claims: 

1. (Currently Amended) A method for managing a presentation of sensitive content 
in non-trusted environments, comprising the steps of: 

interrogating a list of one or more corporate policies associated with a given user 
and a physical device , the policy data being acquired locally from the physical device or 
dynamically via access to a corporate network, each corporate policy prohibiting or 
restricting access to corporate data in a non-trusted environment; 

determining a location of the physical device; 

determining whether the user and the physical device is in a trusted or non4rosted 
environment by comparing the determined location of the physical device with a list of 
trusted locations , the list of trusted locations being embedded within the policy data or 
stored separately ; 

providing access to a subscription-based service that maintains an organization list 
of individuals and machine identification information indicating that a listed individual or 
machine is associated with a predetermined organization; 

determining that an individual or machine identified on the list associated with a 
competitive organization is within a predetermined proximity of the physical device, and 
in response thereto, transmitting an alert to the physical device; and 

enforcing a plurality of rules contained in the corporate policy for managing the 
presentation of sensitive content by blocking a visual presentation or audible presentation 
of at least one object in portions of the presentation if the physical device is not located in 
a trusted location or if an individual or a machine identified on the competitive 
organization list is within a predetermined proximity of the physical device. 
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2. (Previously Presented) The method of claim 1, wherein the method further 
comprises the step of providing a reminder of the policy regarding confidential material 
to the given user in response to an attempt to access sensitive information on the physical 
device. 

3. (Previously Presented) The method of claim 1, wherein the method further 
comprises the step of requesting authentication from the given user in response to an 
attempt to access sensitive information in an open application on the physical device. 

4. (Original) The method of claim 3, wherein the step of requesting authentication 
comprises at least one among requesting provision of a unique password for the given 
user, a unique accessing device, or a unique biometric characteristic of the given user. 

5. (Original) The method of claim 1, wherein the step of determining a location 
comprises the step of using at least one among a global positioning system and a 
terrestrial wireless infrastructure system to provide the location of the physical device. 

6. (Previously Presented) The method claim 1, wherein the step of enforcing 
comprises at least one among blacking out a visual object in. a display during the 
presentation, replacing a visual object with innocuous content during the presentation, 
visually hiding the at least one object from the given user during the presentation, and 
inserting audio 'white noise' gaps in an audio object. 

i. 

7. (Currently Amended) A system for managing a presentation of sensitive content 
in non-trusted environments, comprising: 

a memory; 
a display; and 
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a processor coupled to the memory and the display, wherein the processor is 
programmed to: 

interrogate a list of one or more corporate policies associated with a given 
user and a physical device , the policy data being acquired locally from the 
physical device or dynamically via access to a corporate network, each corporate 
policy prohibiting or restricting access to corporate data in a non-trusted 
environment ; 

determine a location of the physical device; 

determine whether the user and the physical device is in a trusted or non- 
trusted environment by comparing the determined location of the physical device 
with a list of trusted locations , the list of trusted locations being embedded within 
the policy data or stored separately; 

access a subscription-based service that maintains an organization list of 
individuals and machine identification information indicating that a listed 
individual or machine is associated with a predetermined organization; 

determine that an individual or machine identified on the list associated 
with a competitive organization is within a predetermined proximity of the 
physical device, and in response thereto, transmitting an alert to the physical 
device; and 

enforce a plurality of rules contained in the corporate policy for managing 
the presentation of sensitive content by blocking a visual presentation or audible 
presentation of at least one object in portions of the presentation if the physical 
device is not located in a trusted location or if an individual or a machine 
identified on the competitive organization list is within a predetermined proximity 
of the physical device. 

8. (Previously Presented) The system of claim 7, wherein the processor is further 
programmed to provide a reminder of the policy regarding confidential material to the 



4 



Appln.No. 10/730,400 

Amendment dated May 5, 2008 

Reply to Office Action of February 4, 2008 

Docket No. BOC9-2003-0073 (444) 

given user in response to an attempt to access sensitive information on the physical 
device. 

9. (Previously Presented) The system of claim 7, wherein the processor is further 
programmed to request authentication from the given user in response to an attempt to 
access sensitive information in an open application on the physical device. 

10. (Original) The system of claim 9, wherein the processor requests authentication 
by requesting at least one among the provision of a unique password for the given user, a 
unique accessing device, or a unique biometric characteristic of the given user. 

11. (Original) The system of claim 7, wherein the processor determines the location 
by using at least one among a global positioning system and a terrestrial wireless 
infrastructure system to provide the location of the physical device. 

12. (Previously Presented) The system of claim 7, wherein the processor enforces the 
policies by at least one among blacking out a visual object in a display during the 
presentation, replacing a visual object with innocuous content during the presentation, 
visually hiding the at least one object from the given user during the presentation and 
inserting audio 'white noise' gaps in an audio object. 

13. (Currently Amended) A machine-readable storage, having stored thereon a 
computer program having a plurality of code sections executable by a machine for 
causing the machine to perform the steps of: 

interrogating a list of one or more corporate policies associated with a given user 
and a physical device , the policy data being acquired locally from the physical device or 
dynamically via access to a corporate network, each corporate policy prohibiting or 
restricting access to corporate data in a non-trusted environment ; 
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determining a location of the physical device; 

determining whether the user and the physical device is in a trusted or non-trusted 
environment by comparing the determined location of the physical device with a list of 
trusted locations , the list of trusted locations being embedded within the policy data or 
stored separately ; 

providing access to a subscription -based service that maintains an organization list 
of individuals and machine identification information indicating that a listed individual or 
machine is associated with a predetermined organization; 

determining that an individual or machine identified on the list associated with a 
competitive organization is within a predetermined proximity of the physical device, and 
in response thereto, transmitting an alert to the physical device; and 

enforcing a plurality of rules contained in the corporate policy for managing the 
presentation of sensitive content by blocking a visual presentation or audible presentation 
of at least one object in portions of the presentation if the physical device is not located in 
a trusted location or if an individual or a machine identified on the competitive 
organization list is within a predetermined proximity of the physical device. 

14. (Previously Presented) The machine-readable storage of claim 13, wherein the 
computer program further comprises a plurality of code sections for causing the machine 
to provide a reminder of the policy regarding confidential material to the given user in 
response to an attempt to access sensitive information on the physical device. 

15. (Previously Presented) The machine-readable storage of claim 13, wherein the 
computer program further comprises a plurality of code sections for causing to request 
authentication from the given user in response to an attempt to access sensitive 
information in an open application on the physical device. 
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16. (Original) The machine-readable storage of claim 15, wherein the computer 
program requests authentication by requesting at least one among a provision of a unique 
password for the given user, a unique accessing device, or a unique biometric 
characteristic of the given user. 

17. (Original) The machine-readable storage of claim 13, wherein the computer 
program determines a location by using at least one among a global positioning system 
and a terrestrial wireless infrastructure system to provide the location of the physical 
device. 

18. (Previously Presented) The machine-readable storage claim 13, wherein the 
' computer program enforces the policy by at least one among blacking out a visual object 

in a display during the presentation, replacing a visual object with innocuous content 
during the presentation, visually hiding the at least one object from the given user during 
the presentation and inserting audio 'white noise' gaps in an audio object. 

19. (Cancelled) 

20. (Previously Presented) The method of claim 3, further comprising 
identifying a seniority level of the given user; and 

granting a permission to override the policy based on the seniority. 
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